Browse by Tags

• Good Sites with Bad Content

  I have been getting more phishing e-mail lately that points me to "bad" files on what would normally be "good" sites. Last week I got a message that pointed to index1.htm on a site. Index.htm was the valid home page and appeared to... Posted Aug 26 2008, 08:02 PM by Scott Golightly's Blog Filed under: Security

• Reset Password Link as a Security Threat

  I read the article at http://redtape.msnbc.com/2008/08/almost-everyone.html about the "Forgot your password" link to reset your password as being a possible attack vector. I think they discussed the security issue quite well and also pointed... Posted Aug 26 2008, 03:16 PM by Scott Golightly's Blog Filed under: Security

• Detecting Phishing E-mail

  Yesterday I got an e-mail saying it was and open letter from United Airlines to its "best customers" about the high cost of fuel and how it is causing problems in the industry. The gist of the e-mail was that speculation on the cost of oil is... Posted Jul 11 2008, 10:20 AM by Scott Golightly's Blog Filed under: Security

• Advice May Not Always Be Free

  I am sure you have had a time in your life when it seems like everyone gives you advice. It might be graduation, marriage, the birth of a child, a change in jobs or something that prompts the people around you to offer advice. Most of the time you are... Posted Jun 24 2008, 10:23 AM by Scott Golightly's Blog Filed under: Security

• Debian OpenSSL Vulnerability

  I got this from an issue of the RISKS digest. The real problem is that we don't know what OS is used when we purchase a certificate. It might be a good idea to contact the vendors you have purchased certificates from and make sure that you are not... Posted May 19 2008, 11:31 AM by Scott Golightly's Blog Filed under: Security